webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

DotNetNuke DNNArticle Module 10.0 – SQL Injection

Title: DotNetNuke (DNNArticle Module) SQL Injection Vulnerability

2013-08-15 Sajjad Pourali webapps

Spitfire CMS 1.1.4 – Cross-Site Request Forgery

#####################################################################################################################...

2013-08-15 Yashar shahinzadeh webapps

Pligg CMS 2.0.0rc2 – Cross-Site Request Forgery (File Creation)

---------------------------------------------------

2013-08-15 DaOne webapps

Mac’s CMS 1.1.4 – Multiple Vulnerabilities

#####################################################################################################################...

2013-08-15 Yashar shahinzadeh webapps

KCFinder 2.51 – Local File Disclosure

---------------------------------------------------

2013-08-15 DaOne webapps

ACal 2.2.6 – ‘view’ Local File Inclusion

source: https://www.securityfocus.com/bid/61801/info

2013-08-15 ICheer_No0M webapps

DotNetNuke 6.1.x – Cross-Site Scripting

source: https://www.securityfocus.com/bid/61770/info

2013-08-13 Sajjad Pourali webapps

CakePHP 2.2.8/2.3.7 – AssetDispatcher Class Local File Inclusion

source: https://www.securityfocus.com/bid/61746/info

2013-08-13 Takeshi Terada webapps

Joomla! Component redSHOP 1.2 – SQL Injection

--------------------------------------------

2013-08-12 Matias Fontanini webapps

WordPress Plugin Hms Testimonials 2.0.10 – Multiple Vulnerabilities

Update

2013-08-12 RogueCoder webapps

Integrated CMS 1.0 – SQL Injection

==========================================================================================================

2013-08-12 DSST webapps

Gnew 2013.1 – Multiple Vulnerabilities (1)

Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities

2013-08-12 LiquidWorm webapps

PHPVID 1.2.3 – Multiple Vulnerabilities

##################################################################################

2013-08-12 3spi0n webapps

Ajax PHP Penny Auction 1.x 2.x – Multiple Vulnerabilities

################################################################################

2013-08-12 Taha Hunter webapps

MLMAuction Script – ‘gallery.php?id’ SQL Injection

##################################################################################

2013-08-12 3spi0n webapps

Open Real Estate CMS 1.5.1 – Multiple Vulnerabilities

#####################################################################################################################...

2013-08-12 Yashar shahinzadeh webapps

Tribq CMS 5.2.7 – Cross-Site Request Forgery (Adding/Editing New Administrator Account)

###########################################################################################

2013-08-12 Yashar shahinzadeh webapps

PHPFox 3.6.0 (build3) – Multiple SQL Injections

------------------------------------------------------------

2013-08-08 Matias Fontanini webapps

BigTree CMS 4.0 RC2 – Multiple Vulnerabilities

Advisory ID: HTB23165

2013-08-08 High-Tech Bridge SA webapps

Advanced Guestbook – ‘addentry.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/61735/info

2013-08-08 Ashiyane Digital Security Team webapps

Kwok Information Server – Multiple SQL Injections

source: https://www.securityfocus.com/bid/61728/info

2013-08-07 Yogesh Phadtare webapps

McAfee SuperScan 4.0 – Cross-Site Scripting

Trustwave SpiderLabs Security Advisory TWSL2013-024:

2013-08-07 Trustwave's SpiderLabs webapps

Joomla! Component com_sectionex 2.5.96 – SQL Injection

-------------------------------------------------------------------------------------

2013-08-07 Matias Fontanini webapps

WordPress Plugin Usernoise 3.7.8 – Persistent Cross-Site Scripting

Details

2013-08-07 RogueCoder webapps

Hikvision IP Cameras 4.1.0 b130111 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-08-07 Core Security webapps

WordPress Plugin Booking Calendar 4.1.4 – Cross-Site Request Forgery

###########################################################################################

2013-08-07 Dylan Irzi webapps

Pluck CMS 4.7 – HTML Code Injection

###########################################################################################

2013-08-07 Yashar shahinzadeh webapps

FTP OnConnect 1.4.11 iOS – Multiple Vulnerabilities

Title:

2013-08-07 Vulnerability-Lab webapps

RiteCMS 1.0.0 – Multiple Vulnerabilities

###########################################################################################

2013-08-03 Yashar shahinzadeh webapps

Oracle Hyperion 11 – Directory Traversal

=======

2013-08-02 Richard Warren webapps

WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 – Persistent Cross-Site Scripting

=======

2013-08-02 Richard Warren webapps

TP-Link TL-SC3171 IP Cameras – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-08-02 Core Security webapps

Western Digital My Net Wireless Routers – Password Disclosure

Vulnerable Systems:

2013-08-02 Kyle Lovett webapps

Cotonti 0.9.13 – SQL Injection

Advisory ID: HTB23164

2013-08-02 High-Tech Bridge SA webapps

MiCasaVerde VeraLite 1.5.408 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2013-019:

2013-08-02 Trustwave's SpiderLabs webapps

INSTEON Hub 2242-222 – Lack of Web and API Authentication

Trustwave SpiderLabs Security Advisory TWSL2013-023:

2013-08-02 Trustwave's SpiderLabs webapps

D-Link DIR-645 1.03B08 – Multiple Vulnerabilities

Multiple vulnerabilities on D-Link DIR-645 devices

2013-08-02 Roberto Paleari webapps

Telmanik CMS Press 1.01b – ‘pages.php?page_name’ SQL Injection

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2013-08-02 Anarchy Angel webapps

vTiger CRM 5.4.0 SOAP – Multiple Vulnerabilities

---------------------------------------------------------------------------------

2013-08-02 EgiX webapps

BigACE 2.7.8 – Cross-Site Request Forgery (Add Admin)

###########################################################################################

2013-08-02 Yashar shahinzadeh webapps

FunGamez – Arbitrary File Upload

# FunGamez Remote File Upload Vulnerability

2013-08-02 cr4wl3r webapps

Ginkgo CMS – ‘index.php?rang’ SQL Injection

__ ___ ________ __ __ ____ __ __

2013-08-02 Raw-x webapps

SocialEngine Timeline Plugin 4.2.5p9 – Arbitrary File Upload

# Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5

2013-08-02 spyk2r webapps

SilverStripe CMS – ‘MemberLoginForm.php’ Information Disclosure

source: https://www.securityfocus.com/bid/61578/info

2013-08-01 Fara Rustein webapps

Plone – ‘in_portal.py’ < 4.1.3 Session Hijacking

source: https://www.securityfocus.com/bid/61964/info

2013-07-31 Cyrill Bannwart webapps

Jahia xCM – ‘/administration/’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61571/info

2013-07-31 High-Tech Bridge webapps

Jahia xCM – ‘/engines/manager.jsp?site’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61571/info

2013-07-31 High-Tech Bridge webapps

FluxBB 1.5.3 – Multiple Vulnerabilities

FluxBB 1.5.3 Multiple Remote Vulnerabilities

2013-07-29 LiquidWorm webapps

WebDisk 3.0.2 PhotoViewer iOS – Command Execution

Title:

2013-07-29 Vulnerability-Lab webapps

Private Photos 1.0 iOS – Persistent Cross-Site Scripting

Title:

2013-07-29 Vulnerability-Lab webapps